volume_up

A critical vulnerability was discovered in React Server Components (Next.js). Our systems remain protected but we advise to update packages to newest version. Learn More

volume_up

A critical vulnerability was discovered in React Server Components (Next.js). Our systems remain protected but we advise to update packages to newest version. Learn More

ActiveDirectoryRoleProvider gives partial results

Hi

We are using the MuliplexingRoleProvider to search for groups in our Win 2008 R2 Active Directory, however we only get partial results from the EPiServer.Security.ActiveDirectoryRoleProvider when searching for groups. I have actived log level ALL, but no clues there.

I did have problem with a group DN containing an escaped ',' in the AD LDAP tree before, but i fixed that in the LDAP (the error thrown then caused the group viewing to fail totally).

 
    <roleManager enabled="true" defaultProvider="MultiplexingRoleProvider" cacheRolesInCookie="true">
      <providers>
        <clear />
        <add name="MultiplexingRoleProvider" type="EPiServer.Security.MultiplexingRoleProvider, EPiServer" provider1="ActiveDirectoryRoleProvider" providerMap1="ActiveDirectoryMembershipProvider" provider2="WindowsRoleProvider" providerMap2="WindowsMembershipProvider" />
    <add name="ActiveDirectoryRoleProvider" type="EPiServer.Security.ActiveDirectoryRoleProvider,Sogeti.Templates.His" connectionStringName="ActiveDirectoryProviderConnection" connectionUsername="HS\episerver" connectionPassword="password" connectionProtection="SecureSocketsLayer" attributeMapUsername="sAMAccountName" attributeMapRolename="cn" />  
        <add name="WindowsRoleProvider" applicationName="EPiServerSample" type="EPiServer.Security.WindowsRoleProvider, EPiServer" />
      </providers>
    </roleManager>

I'm forced to run with ldaps so i cant watch the network traffic, any hints on how to debug this or anyone who had a similiar problem ?

regards Johan

#53518
Sep 13, 2011 12:56

How many hits do you get? There is a hardcoded maximum number of hits (1000) in the class AdsiDataFactory (method FindAll). Have a look at it with Reflector.

Could be solved by copying the code from AdsiDataFactory and making your own class with a higher limit.

#54994
Nov 14, 2011 17:24
error This thread is locked and should be used for reference only. Please use the Episerver CMS 7 and earlier versions forum to open new discussions.
* You are NOT allowed to include any hyperlinks in the post because your account hasn't associated to your company. User profile should be updated.